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IN THE CLAIMS 

Please amend claims 1, 12, 16, 21-22, 25-26, 29-32, 43, and 46-47 as follows: 
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1 . (currently amended) A system for conducting a transaction with privacy on a 
wide area network, said system including a plurality of personal access devices TPADs) each 
contained in a manually portable housing and capable of generating interactive commands 
transmitted wirelessly. a privacy provider for communication with the PADs. a privacy network, 
and a plurality of vendors, with each of the privacy provider, the privacy network, and the 
plurality of vendors connected to a wide area network for communication with each other, the 
improvement comprising: 

a pluralit)'^ of p e rsonal acc e ss d e vic e s (PADs), e ach PAD contain e d in a manually 
portabl e housing and associat e d with a each PAD including memory for storing unique Privacy 
Subscriber Identification (PSID) data corresponding to a subscriber to said system, each 
manually portable PAD storing a subscriber profile including information related to the 
subscriber for g e n e rating int e ractiv e commands transmitt e d wir e l e ssly ; 

a privacy s e rvic e provid e r (PSP) conn e ct e d to th e wid e ar e a n e twork wherein the 
privacy provider is a privacy service provider (PSP) which stores at least a portion of the 
subscriber profile of each manually portable PAD, e ach manually portabl e PAD b e ing 
associat e d with th e PSP, each manually portable PAD being dir e ctly accessible by said PSP 
based on first predetermined subscriber information that sets a first condition for proceeding with 
the transaction to perform either automatic authorization of the transaction without querying a 
subscriber with the PAD or for manual authorization of the transaction by querying the 
subscriber to enter a command into the PAD as established by the subscriber in said subscriber's 
profile for controlling the processing of requests for authorization of the transaction, and said 
PSP being responsive in real-time to the interactive and wirelessly transmitted commands fi-om 
said manually portable PAD; 



6 



204,896 

a r e gist e r e d v e ndor TRV) conn e ct e d to the wid e ar e a notwork wherein each vendor 
is registered with the privacy network as a registered vendor (RY) in order to conduct the 
transaction involving a subscriber : and 

a privacy shi e ld network (PSN) conn e ct e d to th e wid e ar e a n e twork, said RV 
b e ing r e gister e d with said PSN and said PSN wherein the privacy network is a privacy shield 
network fPSN) structured to carry communications relating to the transaction between said PSP 
and said a specific RV based on second predetermined subscriber information that sets a second 
condition as specifically established by the subscriber in said subscriber's profile for controlling 
the completion of the transaction; 

whereby the specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

2. (original) The system of claim 1, wherein said PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to said RV 
only under said first and second conditions. 

3. (currently amended) The system of claim 2, wherein said PSP also stor e s 
includes memory for storing said profile and said private data. 

4. (original) The system of claim 1, wherein said PSP controls access by said 
RV to said PAD under said first and second conditions. 



7 



204,896 

5. (original) The system of claim 1, wherein said PSP includes a network server. 

6. (original) The system of claim 1 , wherein said RV includes a network server. 

7. (original) The system of claim 1 , wherein said PSN includes a network 

server. 

8. (original) The system of claim 1, wherein said PSP controls access by said 
RV to said profile under said second conditions. 

9. (original) The system of claim 1, further comprising a second registered 
vendor (RV) connected to the wide area network, said PSP being accessible by said second RV 
under third conditions set by said profile, said second RV being accessible by the first mentioned 
RV under fourth conditions set by said second RV and said first RV being accessible by said 
second RV under fifth conditions set by said first RV. 

10. (original) The system of claim 9, wherein said second conditions include 
authorization conditions for authorizing the transaction among said PAD, said first RV and said 
second RV. 

1 1 . (original) The system of claim 1 0, wherein said authorization conditions 
include a first authorization for authorizing said second RV to complete an intermediate 
transaction with said first RV. 
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12. (Currently amended) The system of claim 11, wherein said first authorization is 
sent from said PSP to said second RV over said PSN, said PSN preventing said first RV from 
access to said first authorization. 



13. (original) The system of claim 1, wherein said second conditions include 
authorization conditions for authorizing the transaction between said PAD and said RV. 

14. (original) The system of claim 13, wherein said authorization conditions 
control whether said first RV is authorized to request a response from said PAD. 

15. (original) The system of claim 1 , wherein the wide area network is the 
Internet. 

16. (currently amended) A personal access device (PAD) associated with a 
subscriber for conducting a transaction with privacy on a wide area network, said PAD o perating 
in a system including a plurality of such personal access devices (PADs) each contained in a 
manually portable housing and capable of generating interactive commands transmitted 
wirelessly. a privacy provider for communication with the PADs. a privacy network, and a 
plurality of vendors, with each of the privacy provider, the privacy network, and the plurality of 
vendors connected to a wide area network for communication with each other, the improvement 
in the PAD comprising: 

a manually portabl e housing; 
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a memory for storing unique Privacy Subscriber Identification (PSID) data 
corresponding to the subscriber, and a profile of the subscriber; 

a manually actuable command generator for generating Ae interactive commands; 

a wireless transmitter for wirelessly transmitting the interactive commands 
dir e ctly to a privacy service provider (PSP) fi*om the PAD, the PSP being the privacy provider 
and responsive in real-time to the wirelessly transmitted interactive commands, and with the PSP 
being connected to the wide area network , wherein the PSP stores at least a portion of the 
subscriber profile of each manually portable PAD : and 

a receiver for receiving authorized requests fi-om the PSP, the PSP communicating 
dir e ctly with said PAD based on first predetermined subscriber information that sets a first 
condition for proceeding with the transaction to perform either automatic authorization of the 
transaction without querying a subscriber with the PAD or fer manual authorization of the 
transaction by querying the subscriber to enter a command into the PAD as established by the 
subscriber in said subscriber's profile for controlling requests for authorization of the transaction, 
each authorized request having been received by said PSP over a privacy shield network (PSN) 
as the privacy network connected to the wide area network fi*om another PSP or fi-om a vendor, 
wherein each vendor is registered with the PSN as a registered vendor (RV) or anoth e r privacy 
s e rvic e provid e r, th e RV b e ing r e gist e r e d on th e PSN and with a specific RV communicating 
with the PSP based on second predetermined subscriber information that sets a second condition 
as specifically established by the subscriber in said subscriber's profile for controlling the 
completion of the transaction; 
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whereby the specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

1 7. (original) The PAD of claim I65 wherein the PSP receives fu"St requests over 
the PSN and determines which ones of the first requests are authorized requests under said first 
conditions set by said profile. 

18. (original) The PAD of claim 1 7, wherein if the PSP determines that one of 
the first requests is not an authorized request, the PSP selectively responds to this first request 
over the PSN under second conditions set by said profile. 

19. (original) The PAD of claun 16, wherein said PAD is in the form of a 
selected one of a key chain fob, a pen, a cellular phone, a personal digital assistant, a computer 
and a card. 

20. (original) The PAD of claim 16, wherein said PAD stores private data 
associated with the subscriber, and wherein the PSP releases any of said private data to the RV 
only under said first and second conditions. 

2 1 . (currently amended) The PAD of claim 20, wherein the PSP also stor e s includes 
memory for storing said profile and said private data. 
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22. (previously presented) A privacy s e rvic e provider (PSP) for faoilitating 

communications b e tw ee n a privacy shi e ld n e twork (PSN) and a p e rsonal access d e vic e (PAD) 
associat e d wiih a subscrib e r to th e PSN, wh e r e th e PAD stor e s a profil e of th e subscrib e r and 
wh e r e said PSP and th e PSN ar e conn e ct e d to a wid e ar e a n e twork, said PSP 
A privacy provider operating in a system for conducting a transaction with privacy on a wide 
area network, said system including a plurality of personal access devices (TADs) each contained 
in a manually portable housing and capable of generating interactive commands transmitted 
wirelessly. with the privacy provider in communication with the PADs. a privacy network, and a 
plurality of vendors, with each of the privacy provider, the privacy network, and the plurality of 
vendors connected to a wide area network for communication with each other, the improvement 
in the privacy provider comprising: 

a Privacy Service Provider (PSP) being the privacy provider and including: 

a receiver for receiving the interactive commands transmitted wirelessly 
from the PAD , wh e r e in th e PAD is contain e d in manually portabl e housing ; 

a server, responsive in real-time to the wirelessly transmitted interactive 
commands from the manually portable PAD, with the PAD including memory for storing unique 
Privacy Subscriber Identification TPSID) data corresponding to a subscriber to said system, and 
with the manually portable PAD storing a subscriber profile including information related to the 
subscriber, with the server of the PSP including memory which stores at least a portion of the 
subscriber profile of each manually portable PAD , for communicating with a r e gist e r e d v e ndor 
(RV) over th e PSN the vendors, wherein each vendor is registered with the PSP as a registered 
vendor fRV) in order to conduct the transaction involving a subscriber over the privacy network 
operating as a PSN based on first predetermined subscriber information that sets a first condition 
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for proceeding with the transaction to perform either automatic authorization of the transaction 
without querying a subscriber with the PAD or fef manual authorization of the transaction bv 
querying the subscriber to enter a command into the PAD as established by the subscriber in said 
subscriber profile for controlling the completion of communications and in accordance with 
wirelessly transmitted interactive commands received from the PAD, said server also for 
receiving first requests from the a specific RV and for determining which ones of the first 
requests are authorized requests based on second predetermined subscriber information that sets 
a second condition as specifically established by the subscriber in said subscriber profile for 
controlling the communications; and 

a transmitter for transmitting in real-time the authorized requests to the 

PAD; 

whereby the specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

23. (original) The PSP of claim 22, wherein said server communicates with a 
plurahty of RVs over the PSN in the same way as with the first-mentioned RV. 

24. (original) The PSP of claim 22, wherein the PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to the RV 
only under said first and second conditions. 
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25. (currently amended) The PSP of claim 24, wherein the memory of the server of 
said PSP also stores said profil e and said private data. 

26. (previously presented) A privacy shield network (PSN) conn e ct e d to a 
wide area n e twork, said PSN controlling communications among a plurality of privacy s e rxdc e 
provid e rs (PSPs) and a plurality of r e gist e r e d v e ndors (RVs), wher e e ach PSP is dir e ctly 
controll e d by int e ractiv e commands transmitt e d wir e lessly in r e al tim e from a p e rsonal access 
devic e (PAD) contain e d in a manually portabl e housing and associat e d with an individual 
subscrib e r to said PSN and is further controll e d und e r conditions s e t by a profil e associat e d with 
e ach subscrib e r and stor e d in th e subscrib e r's PAD, said PSN 

A privacy network operating in a system for conducting a transaction with privacy on a wide 
area network, said system including a plurality of personal access devices (PADs) each contained 
in a manually portable housing and capable of generating interactive commands transmitted 
vsarelessly. with at least one privacy provider in communication with the PADs, and a plurality of 
vendors, with each of the privacy providers, the privacy network, and the plurality of vendors 
connected to a wide area network for communication with each other, the improvement in the 
privacy network comprising: 
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a Privacy Shield Network TPSN") being the privacy network and including: 
a first server structure for controUing registration of vendors as RVs 
registered vendors (RWs) in order to conduct the transaction involving a subscriber, with the PSN 
in communication with each of the privacy providers as Privacy Service Providers TPSP) . where 
said PSN prevents transfer of communications from unregistered vendors to any of the PSPs and 
RVs; and 

a second server structure for controlling communications using the wide 
area network from any of the PSPs and RVs to any of the PSPs and RVs participating in the 
transaction , 

wherein said second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs based on first 
predetermined subscriber information that sets a first condition for proceeding with the 
transaction to perform either automatic authorization of the transaction without querying a 
subscriber with the PAD or fof manual authorization of the transaction by querying the 
subscriber to enter a command into the PAD for controlling the processing of communications as 
established by the subscriber in the subscriber's profile stored in memory of the PAD and 
controlled by the first PSP, with the real-time control of communications performed by the 
interactive commands transmitted wirelessly from the manually portable PAD dir e ctly accessible 
to each PSP; 

wherein the memory of the PAD stores unique Privacy Subscriber Identification 
(TSID) data corresponding to the subscriber: 

wherein the PSP stores at least a portion of the subscriber profile of each PAD: 
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whereby a specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

27. (original) The PSN of claim 26, wherein said second server structure controls 
routing of communications from any of the PSPs and RVs to any of the PSPs and RVs over the 
wide area network. 

28. (original) The PSN of claim 26, wherein each PAD stores private data 
associated with the respective subscriber, and wherein the associated PSP releases any of said 
private data to any of the PSPs and RVs only under said first and second conditions. 

29. (currently amended) The PSN of claim 27, wherein at least one of the PSPs alse 
stor e s includes memory for storing said profile and said private data of the respective subscriber. 

30. (currently amended) A method of conducting a transaction with privacy using a 
privacy shi e ld n e twork (PSN) conn e ct e d to a wid e ar e a n e twork, 

system including a plurality of personal access devices fPADs) each contained in a manually 
portable housing and capable of generating interactive commands transmitted wirelessly. a 
privacy provider for communication with the PADs. a privacy network, and a plurality of 
vendors, with each of the privacy provider, the privacy network, and the plurality of vendors 
connected to a wide area network for communication with each other, the improvement in said 
method comprising the steps of: 
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storing a profile of a PSN subscriber in a p e rsonal access d e vic e (Pi\D) memory 
of the PAD contained in a manually portable housing that is associated with the subscriber^ 
wherein the privacy network is a Privacy Service Network ; 

storing in the memory of the PAD unique Privacy Subscriber Identification 
(PSID) data corresponding to the subscriber: 

generating interactive commands using the PAD; 

wirelessly transmitting the interactive commands from the PAD; 

dir e ctly accessing the PAD in real-time based on first predetermined subscriber 
information that sets a first condition for proceeding with the transaction to perform either 
automatic authorization of the transaction without querying a subscriber with the respective PAD 
or fof manual authorization of the transaction by querying the subscriber to enter a command 
into the respective PAD as established by the subscriber in the subscriber profile 
for controlling the processing of requests for authorization of the transaction using a privacy 
service provider (PSP) as the privacy provider connected to the wide area network, the PSP 
being controlled by the wirelessly transmitted interactive commands from the PAD; 

storing at least a portion of the subscriber profile of each PAD in a memory of the 

PSP: 

providing a Privacy Shield Network (PSN) as the privacy network: 
registering a vendor with the PSN as a registered vendor (RV) connected to the 

wide area network in order to conduct the transaction involving a subscriber : and 

transmitting communications between the PSP and the a specific RV r e lat e d to 

th e transaction based on second predetermined subscriber information that sets a second 
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condition as specifically established by the subscriber in the subscriber profile for controlling the 
completion of the transaction using the PSN; 

whereby the specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

3 1 . (currently amended) A method of using a personal access device (PAD) 
associated with a subscriber for conducting a transaction with privacy on a wide area network in 
a system including a plurality of the personal access devices (PADs) each contained in a 
manually portable housing and capable of generating interactive commands transmitted 
wirelessly. a privacy provider for communication with the PADs. a privacy network, and a 
plurality of vendors, vAth each of the privacy provider, the privacy network, and the plurality of 
vendors connected to a wide area network for communication with each other, the improvement 
in said method comprising the steps of: 

storing a profile of the subscriber in a memory contained in [[a]] the manually 
portable housing of the PAD; 

storing in the memory of the PAD unique Privacy Subscriber Identification 
(PSID) data corresponding to the subscriber: 

generating interactive commands in the PAD; 

wirelessly transmitting the interactive commands to a privacy service provider 
(PSP) as the privacy provider that is dir e ctly accessible to the PAD and connected to the wide 
area network; 

storing at least a portion of the subscriber profile of each PAD in the PSP; and 
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receiving authorized requests from the PSP, the PSP communicating in real-time 
with the PAD based on first predetermined subscriber information that sets a first condition for 
proceeding with the transaction to perform either automatic authorization of the transaction 
without querying a subscriber with the respective PAD or fer manual authorization of the 
transaction by querying the subscriber to enter a command into the respective PAD 
as established by the subscriber in the subscriber's profile for controlling the completion of the 
transaction, each authorized request having been received by the PSP imder the control of a 
privacy shield network (PSN) as the privacy network connected to the wide area network, the 
R¥ vendors being registered with the PSN as registered vendors (RVs) in order to conduct the 
transaction involving a subscriber and communicating with the PSP based on second 
predetermined subscriber information that sets a second condition as specifically established by 
the subscriber in the subscriber's profile; 

whereby a specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

32. (currently amended) A method of using a privacy shi e ld n e twork (PSN) 
conn e cted to a wid e ar e a n e twork to control communications among a plurality of privacy 
s e rvic e provid e rs (PSPs) and a plurality of r e gist e r e d v e ndors (RVs), wh e r e oach PSP is dir e ctly 
controlled by int e ractiv e commands transmitt e d wir e l e ssly from a p e rsonal acc e ss d e vic e (PAD) 
contain e d in a manually portabl e housing and associat e d with an individual subscrib e r to th e 
PSN and is furth e r controll e d a profil e of th e individual subscrib e r stor e d in th e subscrib e r's 
PAB^ 
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system including a plurality of personal access devices fPADs) each contained in a manually 
portable housing and capable of generating interactive commands transmitted wirelessly. a 
privacy provider for conmiunication wdth the PADs. a privacy network, and a plurality of 
vendors, v^ith each of the privacy provider, the privacy network, and the plurality of vendors 
connected to a wdde area network for communication with each other, the improvement in 
said method comprising the steps of: 

storing a profile of the subscriber in a memory of the PAD; 

storing in the memory of the PAD unique Privacy Subscriber Identification 
CPSID) data corresponding to the subscriber; 

storing at least a portion of the subscriber profile of each PAD in a privacy service 
provider (PSP) as the privacy provider accessible to the PAD and connected to the wide area 
network; 

using a first service structure for controlling registration of tiie vendors as RVs 
registered vendors (RVs) in order to conduct the transaction involving a subscriber , where the 
PSN a Privacy Shield Network (PSN). as the privacy network, prevents transfer of 
communications of unregistered vendors to any of the PSPs and RVs; and 

using a second server structure for controlling communications using the wide 
area network fi-om any of the PSPs and RVs to any of the PSPs and RVs, 

wherein the second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs under conditions set 
specifically by the subscriber's profile for proceeding with the transaction to perform either 
automatic authorization of the transaction without querying a subscriber with the respective PAD 
or manual authorization of the transaction by querying the subscriber to enter a command into 
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the respective PAD , with the real-time control of communications performed by the interactive 
commands transmitted wirelessly from the manually portable PAD dir e ctly accessible to each 
PSP; 

whereby a specific RV completes the transaction based on the conmiunications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

Claims 33-42 (canceled). 

43. (currently amended) A system for a plurality of individual subscribers to receive 
and transmit communications via the hitemet, the system including a plurality of personal access 
devices (PADs) each contained in a manually portable housing and capable of generating 
interactive commands transmitted wirelessly, a privacy provider for communication with the 
PADs. a privacy network, and a plurality of vendors, with each of the privacy provider, the 
privacy network, and the plurality of vendors connected to a wide area network for 
communication with each other, the improvement comprising: 

an XML privacy service provider (PSP) as the privacy provider linked to the 
Internet for communication; 

a plurality of private XML subscriber data files accessible to said PSP, each file 
being associated with a respective subscriber; 

a memory in the PAD for storing unique Privacy Subscriber Identification (PSID) 
data corresponding to the subscriber and for storing a subscriber profile, with the PAD being 
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a subscriber-programmable personal access device (PAD) contain e d in a manually portable 
housing that provides subscriber access to the respective subscriber's data file and profile and 
dir e ctly communicates in real-time with said PSP using interactive commands transmitted 
wirelessly fi'om the PAD; and 

a plurality of registered vendors (RVs) as the vendors, each vendor being 
registered with a Privacy Shield Network (PSN) as the privacy network in order to conduct the 
transaction involving the subscriber, with the RVs linked to the Internet for communication with 
the subscribers under conditions set by the respective subscriber's data files through said PSP for 
proceeding with the transaction to perform either automatic authorization of the transaction 
without querying a subscriber with the respective PAD or manual authorization of the transaction 
by querying the subscriber to enter a command into the respective PAD: 

whereby a specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

44. (previously presented) The system of claim 43, wherein said PSP 

comprises: 

means for receiving communications from a subscriber; 

means for transmitting a subscriber's file to that subscriber and for changing data 
in the subscriber's file in response to the subscriber's authorization; and 

means for communicating with an RV in connection with a subscriber's file. 
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45. (previously presented) The system of claim 43, wherein each XML 
subscriber data file includes at least one of the following: 

subscriber identifying data; 

subscriber credit account data; 

subscriber cash account data; 

subscriber product preference identifiers; and 

subscriber product exclusion identifiers. 

46. (currently amended) The system of claim 43, wherein each PAD comprises: 
a CPU, an operating system and a memory device for storing the profile : 

a battery; 

a wireless RF communication chip; 

an input/output interface; and 

an encryption key embedded in removable ROM. 

47. (currently amended) A portable battery-powered personal access device (PAD) 
for use by a subscriber in a system for a plurality of individual subscribers that enables the 
subscriber to receive and transmit private personalized communications via the Internet, the 
system including a plurality of the personal access devices (PADs) each contained in a manually 
portable housing and capable of generating interactive commands transmitted wirelessly. a 
privacy provider for communication with the PADs, a privacy network, and a plurality of 
vendors, with each of the privacy provider, the privacy network, and the plurality of vendors 
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connected to a wide area network for communication with each other, the improvement 
comprising: 

an XML privacy service provider (PSP) as the privacy provider linked to the 
Internet for communication, 

a plurality of private XML subscriber data files accessible to the PSP, each file 
being associated with an individual subscriber, said PAD providing a subscriber access to that 
subscriber's file and a communications link v^dth the PSP, and 

a plurality of registered vendors (RVs) linked to the Internet for communication 
with the subscribers under conditions set by each of the respective subscriber's files through the 
PSP, said PAD comprising: 

a manually portabl e housing; 

wherein said PAD includes: 

at least one programmable integrated circuit (IC) device that includes 
encrypted identification means; 

non-directional, short-range conraiunication signal generation and 
receiving means for wirelessly transmitting interactive commands dir e ctly to the PSP in real- 
time; 

a CPU, an operating system and a memory device for storing unique 
Privacy Subscriber Identification fPSID) data corresponding to the subscriber and for storing a 
subscriber profile utilized for proceeding with the transaction to perform either automatic 
authorization of the transaction without querying a subscriber with the respective PAD or manual 
authorization of the transaction by querying the subscriber to enter a command into the 
respective PAD : and 
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an input/output interface; 
whereby a specific RV completes the transaction based on the communications 
with the PSN and without access to personal data of the subscriber, thereby preserving the 
privacy of the subscriber . 

48. (previously presented) The PAD of claim 47, wherein said IC device is 
removable from said PAD. 

49. (previously presented) The PAD of claim 47, wherein the encrypted 
identification means is a unique digital code embedded in ROM. 

50. (previously presented) The PAD of claim 49, wherein said IC device is 
preprogrammed to disable the identification means in the event that security of the unique digital 
code is breached. 

5 1 . (previously presented) The PAD of claim 47, wherein an electronic display 
is visible through an aperture in said housing and the PAD includes at least one manual actuator 
for controlling functions of said PAD. 

52. (previously presented) The PAD of claim 5 1 , further comprising a 
microphone having an on/off switch and a voice recognition program that converts voice to 
digital data for storage in said memory device. 
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